Systems management operational workflow templates

ABSTRACT

Provided are techniques for the specification of templates for the orchestration of workflows such as, but not limited to, computer system server, storage, network, virtualization and cloud infrastructure management operations and tasks. The disclosed techniques support non-scripted native representations of the workflows, the addition of new object types or operation sets or services, atomicity, transactional semantics of workflows and the ability to configure parameters for execution of workflow.

CROSS-REFERENCES TO RELATED APPLICATIONS

The present application is a continuation and claims the benefit of thefiling date of an application entitled, “Systems Management OperationalWorkflow Templates,” Ser. No. 13/168,999, filed Jun. 26, 2011, assignedto the assignee of the present application, and herein incorporated byreference.

FIELD OF DISCLOSURE

The claimed subject matter relates generally to Information Technology(IT) infrastructure management and, more specifically, to specificationtemplates for orchestration of workflows such as computer system server,storage, network, virtualization and cloud infrastructure resourcemanagement operations and tasks.

SUMMARY

Provided are techniques for the specification of templates for theorchestration of workflows such as, but not limited to, computer systemserver, storage, network, virtualization and cloud infrastructuremanagement operations and tasks. Today, many system and enterprisemanagement software applications support some form of “orchestration,”which, simply stated, involves an execution of a sequence of simple orcomplex, but typically arbitrary, management operations, which is termedas “workflow.” However, most forms of orchestration do not supporteither non-scripted native representations of the workflows or theaddition of new object types or operation sets or services. Workflows inexisting orchestration software are also typically hard-coded andsupport invocation of arbitrary scripts or JAVA® operations that aretypically opaque to an orchestration engine. As a result, existingorchestration cannot support either atomicity or transactional semanticsof workflows. In addition, existing orchestration software lacks theability to configure parameters for execution of workflow, whichinfluences, for example, error, temporal and automation semantics.

Relational database servers have implemented “workflows” usingrelational operations that, are orchestrated and automated at runtime.Arbitrary declarative workflow specifications are supported by mostrelational database servers via structured query language (SQL). Forexample, new relational tables may be added at any time withoutrequiring the fundamental, model to be re-coded. Theprocedural/operational model for SQL is called Relational Algebra, whichis a set of well-defined set of relational database operations thatsupport composition of such operations.

Provided are techniques for defining a set of normalized resourcescorresponding to a plurality of infrastructure resources; defining a setof normalized resource states corresponding to the plurality ofinfrastructure resources; defining a set of normalized, operationscorresponding to the plurality of infrastructure resources, whereininputs and outputs corresponding to each normalized operation of the setof normalized operations has a defined type of a plurality of types;generating a plurality of operational sequences, each operation sequencegenerated by composing a plurality of normalized operations of the setof normalized operations with corresponding normalized, resources of theset of normalized resources such that the output of each or the set ofnormalized operations becomes the input of another of the set ofnormalized operations, wherein a defined type corresponding to eachparticular input matches a defined type corresponding to thecorresponding output; generating a workflow plan by composing theplurality of operational sequences in conformity with well-definedoperational semantics; and storing, in a computer-readable storagemedium, the workflow plan for execution on a processor.

This summary is not intended as a comprehensive description of theclaimed subject matter but, rather, is intended to provide a briefoverview of some of the functionality associated therewith. Othersystems, methods, functionality, features and advantages of the claimedsubject matter will be or will become apparent to one with skill in theart upon examination of the following figures and detailed description.

BRIEF DESCRIPTION OF THE DRAWINGS

A better understanding of the claimed subject matter can be obtainedwhen the following detailed description of the disclosed embodiments isconsidered in conjunction with the following figures, in which:

FIG. 1 is a block diagram of a resource and Infrastructure Managementarchitecture that may support the claimed subject matter.

FIG. 2 is a block diagram of a Resource and Infrastructure OrchestrationSystem (RIOS), first introduced in FIG. 1, in more detail.

FIG. 3 is a block diagram of normalized infrastructure resource statesemployed by the claimed subject matter.

FIG. 4 is a block diagram illustrating basic resource control that maybe employed with respect to the disclosed technology.

FIG. 5 is block diagram illustrating deployment control that may beemployed with respect to the disclosed technology.

FIG. 6 is a block diagram illustrating mobility control that may beemployed with respect to the disclosed technology.

FIG. 7 is a block diagram illustrating group and composite control thatmay be employed with respect to the disclosed technology.

FIG. 8 is a block diagram illustrating availability control that may beemployed with respect to the disclosed technology.

FIG. 9 is a block diagram illustrating durability control that may beemployed with, respect to the disclosed technology.

FIG. 10 is a block diagram illustrating a composition of normalizedinfrastructure operations that may be employed with respect to thedisclosed technology.

FIG. 11 is a block diagram illustrating one example of a workflowemployed according to the disclosed technology to create a redundant,array of independent disks (RAID) resource object.

FIG. 12 is a block diagram of an Error Semantics that may be employedwith respect to the disclosed technology.

FIG. 13 is a block diagram of a Workflow Template that specifies aprocedural infrastructure resource operational language to modelstrategic high-value administrative tasks.

FIG. 14 is a flow chart of a Prepare Operational Workflow process thatmay implement aspects the claimed subject matter.

FIG. 15 is a flow chart of an Execute Operation Workflow process that,may implement aspects the claimed subject matter.

DETAILED DESCRIPTION

As will be appreciated by one skilled in the art, aspects of the presentinvention may be embodied as a system, method or computer programproduct. Accordingly, aspects of the present invention may take the formof an entirely hardware embodiment, an entirely software embodiment(including firmware, resident software, micro-code, etc.) or anembodiment combining software and hardware aspects that may allgenerally be referred to herein as a “circuit,” “module” or “system.”Furthermore, aspects of the present invention may take the form of acomputer program product embodied in one or more computer readablemedium(s) having computer readable program code embodied thereon.

Any combination of one or more computer readable medium(s) may beutilized. The computer readable medium may be a computer readable signalmedium or a computer readable storage medium. A computer readablestorage medium may be, for example, but not limited to, an electronic,magnetic, optical, electromagnetic, infrared, or semiconductor system,apparatus, or device, or any suitable combination of the foregoing. Morespecific examples (a non-exhaustive list) of the computer readablestorage medium, would include the following: an electrical connectionhaving one or more wires, a portable computer diskette, a hard disk, arandom access memory (RAM), a read-only memory (ROM), an erasableprogrammable read-only memory (EPROM or Flash memory), an optical fiber,a portable compact disc read-only memory (CD-ROM), an optical storagedevice, a magnetic storage device, or any suitable combination of theforegoing. In the context of this document, a computer readable storagemedium may be any tangible medium that can contain, or store a programfor use by or in connection with an instruction execution system,apparatus, or device.

A computer readable signal medium may include a propagated data signalwith computer readable program code embodied therein, for example, inbaseband or as part of a carrier wave. Such a propagated signal may takeany of a variety of forms, including, but not limited to,electro-magnetic, optical, or any suitable combination thereof. Acomputer readable signal medium may be any computer readable medium thatis not a computer readable storage medium and that can communicate,propagate, or transport a program for use by or in connection, with aninstruction execution system, apparatus, or device.

Program code embodied on a computer readable medium may be transmittedusing any appropriate medium, including but not limited to wireless,wireline, optical fiber cable, RF, etc., or any suitable combination ofthe foregoing.

Computer program code for carrying out operations for aspects of thepresent invention may be written in any combination of one or moreprogramming languages, including an object oriented programming languagesuch as Java, Smalltalk, C++ or the like and conventional proceduralprogramming languages, such as the “C” programming language or similarprogramming languages. The program code may execute entirely on theuser's computer, partly on the user's computer, as a stand-alonesoftware package, partly on the user's computer and partly on a remotecomputer or entirely on the remote computer or server. In the latterscenario, the remote computer may be connected to the user's computerthrough any type of network, including a local area network (LAN) or awide area network (WAN), or the connection may be made to an externalcomputer (for example, through the Internet using an Internet ServiceProvider).

Aspects of the present invention are described below with reference toflowchart illustrations and/or block diagrams of methods, apparatus(systems) and computer program products according to embodiments of theinvention. It will be understood that, each block of the flowchartillustrations and/or block diagrams, and combinations of blocks in theflowchart illustrations and/or block diagrams, can be implemented bycomputer program instructions. These computer program instructions maybe provided to a processor of a general purpose computer, specialpurpose computer, or other programmable data processing apparatus toproduce a machine, such that the instructions, which execute via theprocessor of the computer or other programmable data, processingapparatus, create means for implementing the functions/acts specified inthe flowchart and/or block diagram block or blocks.

These computer program instructions may also be stored in a computerreadable medium that can direct a computer, other programmable data,processing apparatus, or other devices to function in a particularmanner, such that the instructions stored in the computer readablemedium produce an article of manufacture including instructions whichimplement the function/act specified in the flowchart and/or blockdiagram block or blocks.

The computer program instructions may also be loaded onto a computer,other programmable data processing apparatus, or other devices to causea series of operational steps to be performed on the computer, otherprogrammable apparatus or other devices to produce a computerimplemented process such that the instructions which execute on thecomputer or other programmable apparatus provide processes forimplementing the functions/acts specified in the flowchart and/or blockdiagram block or blocks.

Turning now to the figures, FIG. 1 is a block diagram of an example of aresource and infrastructure management architecture 100 that mayimplement the claimed subject matter. A management server 102 includes acentral processing unit. (CPU), or “processor,” 104, coupled to amonitor 106, a keyboard 108 and a pointing device, or “mouse,” 110,which together facilitate human interaction with computing system 100and management server 102. Also included in management server 102 andattached to management server 102 is a computer-readable storage medium(CRSM) 112, which may either be incorporated into computing system 102i.e. an internal device, or attached externally to management server 102by means of various, commonly available connection devices such as butnot limited to, a universal serial bus (USB) port (not shown). CRSM 112is illustrated storing an operating system 114 and a Resource andinfrastructure Orchestration system (RIOS) 116 that, may implement theclaimed subject matter.

It should be noted that a management server 102 would typically includemore elements than the illustrated components but for the sake ofsimplicity only the illustrated components are shown. RIOS 116 isdescribed in more detail below in conjunction with FIGS. 2-15.

Management server 102 is connected to a management network 118, whichmay be, among other options, a local area network (LAN) or the Internet.A data server 121, coupled to a CRSM 122 and a CRSM 123, is alsocommunicatively coupled to a physical managed network 124. Managementnetwork 118 provides connectivity between management server 102 andlogical and virtual resource 130 and physical resources 120. Examples ofdevices that may be included in logical and virtual resources 130include, but are not limited to, a hypervisor (HYVSR) 131, a virtualmemory (VM) 132, a storage volume (SV) 133, a virtual disk (VD) 134, avirtual LAN (VLAN) 135, a virtual communication Ethernet or PC port, orport, 136, a virtual managed network 137, a virtual switch (not shown)or a virtual Ethernet bridge (not shown). Examples of devices that maybe included in physical resources 120 include, but are not limited to,an application server 125, managed network 124, data server 121 withattached CRSMs 122 and 123, a CRSM 126 and a network adaptor (NA) 127.Physical systems and resources may be connected to each other viaphysical managed network such as, but not limited to, a LAN, SAN orconverged FCoE LAN.

Although in this example, management server 102, logical and virtualresources 130 and physical resources 120 are communicatively coupled viamanagement network 118, they could also be coupled through any number ofcommunication mediums such as, but not limited to, a wide area network(WAN) (not shown) and direct wire (not shown). Further, it should benoted there are many possible resource and infrastructure managementsystem configurations, of which resource and infrastructure managementarchitecture 100 is only one simple example.

Resources 120 and 130 represent a pool of virtual or logical resourceelements of physical devices, or simply a “pool.” In the followingexamples, the devices of pool are used as examples of computingresources, or objects, that may be orchestrated by means of the claimedtechnology. Collections of similar objects, such as CRSM 122 and 123 arereferred to as groups. Relationships among different objects, includinggroups, such as the relationships among server 121 and CRSM 122 and 123are referred to as infrastructures or fabrics. A dotted line 138indicates that logical and virtual resources 130 represent variousconfigurations of physical resources 120.

In addition, in the following example, the disclosed techniques areimplemented by RIOS 116 executing on management server 102. It should beunderstood that many types of resources, both hardware and software, andsystems may benefit form the claimed subject matter but for the sakesimplicity the examples are limited to the types and numbers ofcomponents described above.

As the inventors herein have realized, a Resource and InfrastructureManagement operational workflow can be written as a composition ofresource management operations with well-defined operational semanticsand flexible enough to support any hardware and/or softwareinfrastructure resource, including, for example, servers, storage,networks, virtualization elements and combinations thereof, including acloud elements.

Throughout the Specification, a “resource” may be an individual atomicor composite objects, physical, logical or virtual computing objects,networking, storage or virtualization objects. Typically, a resource mayexist independently and/or may be provisioned independently. Examples ofphysical, resources include server systems, storage systems, network,switches, disk drives, adapters and so on. Examples of logical andvirtual resources include virtual machines, storage volumes, files,virtual disks and so on. An atomic resource is one that cannot bedivided. In a hierarchical definition, a resource may be a compositeunit comprising other sub-resources. One examples of a compositeresource type is a BladeCenter chassis. A group may be any collection ofhomogeneous or heterogeneous resources. Examples of groups includeserver pool, multi-pathing group, HA-redundant pair of network adapters,virtual machine collection and so on. A fabric Is an aggregate oftypically logical connections between resources or groups of resources.Examples of fabrics include VLANs, FC SAN zones and so on.

In order to compose resource management operations the resource andinfrastructure operational model supports the following;

-   -   1) Normalized set of Infrastructure resource states (see FIG.        3): Normalizing the states of infrastructure resources (whether        basic resource objects or groupings or composite objects        involving higher-level objects) helps to reduce the total set of        states “adjectives” (e.g., Undeployed, Deployed, etc) and also        to classify the resource management operation space. This        applies to all infrastructure resource elements such as, but not        limited to, servers, networks and virtualization resources.    -   2) Normalized set of infrastructure Resources: Normalizing the        infrastructure resource space into a few basic types (e.g.,        resource, group, fabric etc) helps reduce the total number of        “nouns” involved which in effect helps normalize the        infrastructure management operations. In addition, resource        objects may be defined as atomic objects, i.e. indivisible (e.g.        disk, drive, storage volume, virtual machine, adaptor), or        object-composition, i.e. a composite object (e.g. BladeCenter        chassis comprising multiple modules, chassis, blades, PSU,        etc.). Throughout the remainder of the Specification, an        object-composition is termed as a composite object to avoid        confusion with an operational composition.    -   3) Normalized with Strong Typing of the Set of infrastructure        operations: All infrastructure management operations need to be        strongly typed—that is, their operation schema needs to be very        well-defined (e.g., inputs, outputs, error semantics). The        operations need to be normalized via reduction of the total        number of “verbs” in the vocabulary as well as normalizing the        signature of the operation itself. Each operation is typically        either a unary (single input) or binary operation (dual input),        although occasionally more inputs may be employed. Typically,        the same rules that apply to binary inputs apply to operations        with three or more inputs. For the sake of simplicity,        throughout the remainder of the Specification, examples and        descriptions involve unary and binary operations.    -   4) Composition of normalized operations: “Composable” operations        are now well-defined normalized operations that fit one common        operational schema. A composition of these operations can then        be applied in sequence such that the unary (or binary) input(s)        to the N^(th) operation is (are) the output of the N−1^(st)        operation (and the output of the N−2^(th) operation) and the        output of the N^(th) operation in turn becomes an input of the        N+1^(st) operation. The only constraint is that the input and        output types must match, i.e. a “strong typing” requirement. The        workflow operations defined earlier are all by definition        composable operations. A sequence of such operations with input        and output relationships between operations as described above        is defined as an ordered composition of operations. The ordering        is derived from the particular sequence in which the operations        are applied (example: N+1^(st) operation. Nth operation,        N−1^(st) operation). An ordered composition of operations may be        a partial order if binary operations are involved or a fully        ordered composition if only unary operations are involved. For        example, in the case of binary operations, there may not be an        order specified between evaluation of left and right inputs. The        term “partial” order is used to represent the more general        binary input case.    -   5) Calculus of normalised operations: Together, the set of all        normalized operations and the rules for composition of such        operations are referred to as the calculus of resource and        infrastructure operations.    -   6) Workflow as a composition of operations: A resource and        infrastructure operational workflow, or a plan, is a named        partial order composition of a set, or library, of named        operations drawn from a larger set of pre-defined, resource or        infrastructure management operations.    -   7) Well-defined runtime semantics for the workflow; The workflow        runtime semantics is defined via a workflow plan “semantics”        object, that is passed as an additional argument to the workflow        plan. In general, the workflow plan semantics are defined to        support typical desired semantics such as below:        -   Atomicity semantics: This is supported only if for every            control operation there is a snatching rollback operation            that is defined.        -   Error handling semantics; This is useful to suggest whether            to return on first critical error or continue even if an            error is encountered.        -   Ordering semantics: In a partial order workflow plan, an            ordering may be specified for the sub-compositions of the            plan that may be otherwise run asynchronously.        -   Priority semantics: In a work-flow plan, a priority may be            attached for the particular sub-composition of the workflow            plan. For instance, a particular sub-composition may be            attached high priority in which case all resources may be            provided, to the high priority sub-composition.        -   Temporal/Automation semantics: This is used to suggest            perhaps how much time to wait before the plan starts to be            executed or how much time to wait between any two partial            orders before declaring a problem and so on.

FIG. 2 is a block diagram of RIOS 116, first introduced in FIG. 1, inmore detail. RIOS 116 includes three (3) types of input/output (I/O)ports, i.e. an application programming Interface (API) 139, a userinterface (UI) 140 and a command line interface (CLI) 141. Those withskill in the relevant arts will recognize the different interfaces139-141 as well other suitable types of interlaces. I/O ports 139-141handle communication ROS 116 has with other components of managementserver 102 (FIG. 1) and system 100 (FIG. 1).

RIOS 116 also includes an orchestration engine 142 that storesexecutable logic for the implementation of aspects of the claimedsubject matter including the definition of workflows. A ResourceOperation Execution Logic (ROEL) 143 stores executable logic thatimplements a defined workflow. A runtime 156 stores executable logic forthe implementation of aspects of RIDS 116 not handled by orchestrationengine 142 and ROLL 143.

A management database 145 is a computer-readable storage medium thatstores workflow templates 146, infrastructure objects 147 and modeledinfrastructure objects 148. Workflow templates 146, Infrastructureobject 147 and infrastructure objects 148 may store parameters such as,but not limited to, definitions of runtime semantics and definitions ofnormalized resources, resource states and operations. Such definitionsmay be composed into libraries that are extendable by the addition ofadditional definitions of runtime semantics and definitions ofnormalized resources, resource states and operations. Infrastructureobjects 157 represents potential resources that may be discovered bydiscovery execution logic 149 at remote locations such as over theInternet. Functionality associated with components 139-149 and 157 areexplained in more detail below in conjunction with FIGS. 3-15.

FIG. 3 is a block diagram of three (3) normalized infrastructureresource states employed by the claimed subject matter. Normalizingstates of infrastructure resources (whether basic resource objects orgroupings or composite objects involving higher-level objects) reducesthe total set of states “adjectives” (e.g., Undeployed, Deployed,Activated, etc) and also facilitates classification of an infrastructuremanagement operation space.

The three states include a Static Object Universe 1 (SOU_1) 150, aStatic Infrastructure Universe 1 (SIU_1) 160, and a Dynamicinfrastructure Universe 1 (DIU_1) 170. Static Object Universe (SOU_1)150 is the universe of undeployed manageable resource and system objectsknown to a particular embodiment of the claimed subject matter, SOU_1150 illustrates objects 151-155 in an “undeployed” state, i.e. with nodefined relationships. Objects in this universe are static and in arestful state. Static Infrastructure Universe (SIU_1) 160 is theuniverse of all Deployed (connected) resources and composite resourcesknown to a particular embodiment of the claimed subject matter. In thisuniverse, the relationships and connections between resources areexplicit. In this example, SIU_1 160 illustrates objects 151-155 in a“deployed” state and some relationships 158 among objects 151-155. Ingeneral, objects and the corresponding relationships define an“infrastructure” such as SIU_1 160. However, infrastructure resources inthis universe are still static and not performing any useful function,Dynamic Infrastructure Universe (DIU_1) 170 is the universe of Activatedinfrastructure resources that are deployed to perform some usefulfunction in an interconnected way and known to a running computerprogram embodiment of this invention, DIU_1 170 illustrates objects171-175 in an “activated” state with some relationships 178. BecauseDIU_1 170 defines both objects and relationships, DIU_1 170 represents adynamic infrastructure.

A core set of infrastructure resources may be broadly classified intophysical resources (see 120, FIG. 1) (e.g. systems or platforms, diskdrives, etc.), logical resources (see 130, FIG. 1) (e.g. virtualmachines, storage volumes, virtual disks, ports, etc.), groups (e.g.,disk drive arrays, server system, pools, multi-pathing group, etc.), andfabrics (e.g., VLANs, FC SAN, etc). The rest of the types are compositeobjects on these basic resource types and in turn represent higher-orderresources, groups and/or fabrics. In this example, infrastructureresource states are reduced to the 3 key states: Undeployed, Deployed,and Activated. Undeployed implies—not usable or exploitable. Deployedimplies usable or exploitable. Activated implies being-used or exploitedat any point in time. For example, a server in a reserve pool isundeployed, a storage volume attached to a server is deployed, and avirtual memory (VM) that has been started up is in activated state. Insome cases, the move from deployed to activated may be a no-operation,or “nop,” but this normalized view across all resources facilitates thedefinition of an operational workflow. In addition, resources may haveother states and status in which an administrator is interested; theymaybe handled as before and are not critical to the operational workflowmodel.

Infrastructure management operations are strongly typed in that theyhave well-defined Inputs, Outputs and Operation Semantics, inputs arewell-defined resource or group or fabric types. Some examples include:

-   -   Unary Operations: These are workflow operations that take a        single input (Target);    -   Binary Operations: These are workflow operations that take two        inputs (Source & Target;    -   Inputs: These are well-defined resource, group or fabric type        objects;    -   Output; Output is a well-defined resource, group or fabric type        object;    -   Operation semantics: The operation has to have a semantics        object that carries the initial profile or best practice pattern        for the object and/or the semantics of the operation itself        including any best practice pattern that may apply.

Operations are strongly typed as follows. One embodiment of thesignatures for the operations in this calculus are described below usinga procedural programming language flavor such as C, C++ or JAVA®, Unaryoperations of the calculus have the following signature:

-   -   ReturnedObject OperationPerformedOnSource (SemanticsObject,        TargetObject, RuntimeContextObject);        and all binary operations of the calculus have the following        signature:    -   ReturnedObject OperationPerformedOnSource (SemanticsObject,        SourceObject, TargetObject, RuntimeContextObject);    -   where SemanticsObject defines the profile, best practice, or        policy applied on the object or the operation. Supporting        operations are provided to generate this object from object        profiles, policies, and best practices.    -   SourceObject is the object which is the target for source for        binary operations.    -   TargetObject is the target object for both, unary and binary        operations.    -   RunTimeContextObject is the object that carries the        RuntimeContext for the operation and it carries error,        async/sync semantics, locking/unlocking semantics, transaction        IDs if any and is passed from operation to operation and    -   ReturnedObject is the output that is the end result of the        operation. For example, with respect to a Create operation, the        created object is the ReturnedObject; with respect to a Move        operation, the moved object in its moved state or location is        the ReturnedObject.        Teranry operations, if applicable in the calculus, has a Source,        Target and an Intermediate or Staging object as inputs.

The exact implementation of the application programming interface abovedepends on the implementation. In general, regardless of whether anobject is carried around as a reference type and returned as a referencetype is up to the implementation. Implementations may vary depending onthe language used for implementation. Other embodiments are possiblewithin procedural languages, functional languages (such as Scheme), orlogical calculus languages (which are beyond the scope of thisinvention). With the resource state, typing, and infrastructuremanagement operations being normalized, the calculus comprises anenumerated normalized set of operations (otherwise termed as a libraryof operations). In general, a core subset of the enumerated set isexpected to apply to all resources, groups, and fabrics. For example,Create, Delete, Deploy, Undeploy, Activate, and De-activate are expectedto be applicable to all logical resources regardless of whether they areserver, storage, or network resources. It is possible for a subset ofthe calculus to be applicable to only a subset of the resources, forexample, Backup and Archive may apply only to storage resource objects.The calculus of operations is not a statis and fixed set—additionaloperations discovered subsequently can be added to the set as long as itfollows the constraints posed by this model.

FIG. 4 is a block diagram illustrating Basic Control with respect toSOU_1 150 (FIG. 3). Like FIG. 3, FIG. 4 includes objects 161-165. Inaddition, FIG. 4 illustrates several management operations that may betaken with respect to objects such as objects 161-165, including aCreate 182, a Delete 183, a Get 184, a Set 185, a Copy, or “Clone,” 186,an Update 187 and a Transform 188. Operations 182-188 are typically usedfor the life-cycle of static resource objects and most operationscontinue to keep the resource in static state, i.e. typically performedon Undeployed objects with the exception for the Deploy operation thattakes a resource object from an Undeployed state to a Deployed state.

Create 182 creates a static database object and possibly a memory objectthat represents a manageable and provisionabie resource using theattributes, defined ports/objects and constraints presented in a bestpractices template for the resource object. Create 182 is generally usedfor static creation of a logical resource object. For example, a clusteris a composite resource object that may be statically created, See“Reform” which is a dynamic re-formation of a cluster and applies onlyto clusters. There may be other “add,” “create,” “discover,” “delete” or“remove” operations where end-point instances or group instances areadded or created within the database or runtime. These operations do nothave any defined input end-point or group. Any end-point/groupspecification is performed as part of the constraints for the operation(see below). The output of these operations is an end-point or a group.

Delete 183 deletes an in-memory and/or database object. Delete 183 takesan end-point or group as input and return NULL as output. With respectto Get 184, filter criteria may be specified in a SemanticsObject and ifthe filter when applied turns out to be TRUE, then for resources,platforms, fabrics or groups the corresponding objects are returned. Set185 performs configuration, state-changing, etc operations on theobject. Copy 186 typically applies to logical resources and causes aclone with a new object ID to be created. In this example, object 161has been copied to create a new object 191.

Update 187 is a typically a nop for all but for physical Platformobjects (also typically termed, as systems or devices). If an objectrepresents an undatable software or hardware platform that requires asystems software or firmware update, then Update 187 is applicable.Transform 188 is typically used to transform the type of an object, inthis example, object 191 has been transformed to a new object 192.

FIG. 5 is block diagram illustrating Deployment and Activation Controlthat may be employed with respect to SOU_1 150, SIO_1 160, and DIU_1 170of FIG. 3, Deployment and activation control operations are typicallyused to put infrastructure resources to use for exploitation or to pullout of exploitation. FIG. 5 illustrates key operations that change theDeployed or Activated state of the resource. Note that Copy 186 (FIG. 3)is shown here only as an example for creating a static clone of aDeployed or Activated object.

A Deploy 193 typically refers to the deployment of an atomic orcomposite resource object. An Undeploy 194 typically refers to theremoval, of a resource object from the infrastructure. An Activate 195typically refers to activating a resource object to become useful in theenvironment, if applicable, otherwise Activate 195 serves as a nop. ADe-activate 196 refers to de-activating a resource object, ifapplicable, otherwise De-activate 196 serves as a nop.

FIG. 6 is a block diagram illustrating Mobility Control that may beemployed with respect to different universes such as SOU_1 150, SIO_1160 and DIU_1 170 of FIG. 2. These operations are used to move ormigrate resources in the infrastructure (e.g., VM mobility, storagemigration). The nature of the move may be local or remote depending onthe kind of object and the kind, of network fabric underneath. Thediagram depicts a Move 206 in which an object in SOU_1 150 is moved toanother static objet universe 2 (SOU_2) 202. The diagram also depicts aMove 208 in which an object in DIU_1 160 is moved to another dynamicinfrastructure universe 2 (DIU_2) 204. VM mobility is a dynamic examplewhereas storage migration of a static storage volume object is a staticexample. It should be noted that Mobility Control does not typicallyapply to physical resources such as server systems, disk drives, etc.

FIG. 7 is a block diagram of illustrating Group and Composite-ObjectControl that may be employed with respect to different universes such asa Universe_1 212 and a Universe_2 214. These operations apply to groupsof resources or higher-order composite objects. When the object is agroup, a “member” represents a member of the group. When the object is a“composite object” then that “member” represents a sub-component of thecomposite object (e.g., blade is a member of a chassis). Examples ofoperations include, but are not limited to an Add Member 216, a DropMember 218, a Get Member 220, a Set Member 222 and a Transfer 224.

Add Member 216 adds an object or a sub-component to a group or compositeobject. Fro a composite object, the semantics may provide additionalconstraints on where to add the member. Drop Member 218, drops, orremoves, a member from a group or composite object. Get Member 220applies filter criteria in the SemanticsObject and if the filter whenapplied turns out to be TRUE, then if a singular object satisfies thefilter the member object is returned else NULL or NULL-GROUP isreturned. NULL-GROUP implies more than one object was returned. SetMember 222 involves, if applicable, modifying the state of a particularmember that matches a filter (e.g., an identifier) in the group orcomposite object. A Transfer 224 moves an object from one universe toanother. In this example, Transfer 224 is illustrated moving both adynamic object 226 and a deployed object 228 between Universe_1 212 andUniverse_2 214.

In addition there may be a GetSubGroup (not shown) that applies tosub-groupings or sub-composite objects within composite objects,respectively. Those member objects that result in a filter being TRUEare returned as a group of the same type as the original group (If theoriginal object was a heterogeneous group and the filter retained onlyhomogeneous objects, the returned group is still a heterogeneous groupof the same type as the original group. There may also be a SetSubGroup(not shown) used to set the states of all members in the group thatsatisfy a filter criteria. A FormGroup (not shown) is used when agrouping or composite object supports a dynamic ability to “form” thegroup (example: clusters supports dynamic reformation of the group). ABreakGroup (not shown) is used to decompose the group object, e.g. to:break a cluster apart.

FIG. 8 is a block diagram illustrating Availability Control that may beemployed with respect to different universes such as DIU_1 170 (FIGS. 2,4 and 5) and DIU_2 204 (FIG. 5). Availability control is provided withtwo (2) value-added functions for which implementation is optional butat a minimum stubs are recommended. Provided is a Failover 230, which isemployed to failover a basic resource object or a composite-object fromone location (or universe) onto another location (or Universe),typically in a Disaster Recovery scenario (not shown) and/or a Fallback232.

FIG. 9 is a block diagram illustrating Durability Control that may beemployed with respect to different universes such as SOU_1 150 (FIGS.2-5) and SOU_2 204 (FIG. 5). In this example, SOU_2 204 is the backup orarchive storage location for resources. Functions that provide thedisclosed actions include a Backup 234, which typically performs abackup of a storage resource in a specific location; a Restore 236,which typically performs a restore of a storage resource from itsbackup; an Archive 238, which typically performs an archive of a storageresource at a specified secondary storage location; and an Unarchive240, which typically returns the object from its archived state back toprimary storage. These operations are typically used to enhance thelong-term durability of data or storage objects.

FIG. 10 is a block diagram illustrating a composition of normalizedinfrastructure operations that may be employed with respect to thedisclosed technology. Included is an operational workflow 250. Acomposition of normalized infrastructure operations such as operationalworkflow 250 may be applied in a sequence such that the input to theN^(th) operation is the output of the N−1^(th) operation and the outputof the N^(th) operation in turn becomes the input of the N+1^(th)operation. One constraint is that input and output types match. Workflowoperation 250 defined is by definition a composable operation. Theordering is derived from the particular sequence in which the operationsare applied. For example, in FIG. 10, a Target End-Point (EP) 5.0operation 252 and an Optional Target End-Point 5.1 (OTE) 254 areexecuted and the corresponding outputs become inputs to an Operation(Op.) 4.0 258. The notations such as notation “ . . . ” 256 followingelements of operation workflow 250 indicate that there may be one (1) ormore additional, similar elements corresponding to each element.

In a similar fashion, outputs corresponding to Operation 4.0 258 and anOptional Operation 4.1 260 provide inputs to an Operation 3.0 262;outputs corresponding to Operation 3.0 262 and an Optional Operation 3.1264 provide inputs to an Operation 2.0 266; and outputs corresponding toOperation 3.0 2628 and an Optional Operation 3.1 264 provide inputs toan Operation 2.0 266. Finally, outputs corresponding to Operation 2.0266 and an Optional Operation 2.1 268 provide inputs to a Root Operation1.0 270. A sequence of named workflow operations such as workflow 250and additional operational workflows (not shown) may be applied with theinputs and outputs of the operations as defined above in what isreferred to an ordered composition.

FIG. 11 is a block diagram illustrating one example of a workflow, i.e.an operational workflow 280, employed according to the disclosedtechnology to create a redundant array of independent disks (RAID)resource object. In this example, a Get Drives operation 282 picksavailable storage drives from a storage container 284. A Root operation1.0 286 then combines the picked storage drives into a configurationselected from possible configurations detailed in a storage containers288. For example, a number of disk drives may be combined to create aRAID 1 or a RAID 5 array. The semantics object may be different for eachobject type, i.e. RAID 1 and RAID 5, and so for each operation such asroot operation 1.0 286 in a workflow such as workflow 280 an appropriatesemantics object is created. However, runtime semantics for a workflowis captured in specific runtime semantics objects.

Examples of operations for best practice and operational semanticsinclude;

-   -   CreateSemanticsObj ( )—This creates a semantics object based on        the profiles or best practices or policies for an object or the        operation in question.    -   DeleteSemanticsObj ( )—This deletes a semantics object (If        persistent).    -   GetSemanticsObj ( )—This can retrieve semantics objects for an        object type or operation.    -   SetSemanticsObj ( )—This can modify a semantics object.

FIG. 12 is a block diagram of Error Semantics in conjunction withoperation workflow 250 (FIG. 10). Like FIG. 10, FIG. 12 includes targetend 252, OTE 254, operations 258, 260, 262, 264, 266, 268 and 270. Alsoillustrated are Null with Error 302, which is transmitted from targetEnd 5.0 252 to op. 4.0 258 upon detection of an exception duringprocessing. In a similar fashion under similar circumstances, a Nullwith Error 304 is transmitted from Op. 4.0 258 to OP. 3.0 262, a Nullwith Error 306 is transmitted from Op. 3.0 262 to OP. 2.0 266, a Nullwith Error 308 is transmitted from Op. 2.0 266 to Root OP. 1.0 270. Inaddition, a Null with Error 310 is transmitted form Root Op. 270 is aprocess that initiated operation workflow 250. In this manner, anexception generated anywhere in the tree represented by operationworkflow 250 is ultimately transmitted to the initiating process.

Examples of operations that may support validation with respect to errorsemantics include ValidateSemantics ( ) and ValidateWorkflow ( ).Operations that support blocking semantics Include:

-   -   Lock ( )—This enables locking of an object (either in the        database or in a lock implemented in an appropriate resource        domain). READER, WRITER locks are implemented.    -   Unlock ( )—This unlocks an object.    -   UpgradeLock—This upgrades a lock (e.g., READER to WRITER).    -   DowngradeLock( )—This downgrades a lock.

FIG. 13 is a block diagram of one example of a Workflow Template 350that specifies a procedural infrastructure resource operational languageto model a sequence of individual strategic high-value administrativeoperations or tasks. The workflow template is parameterized, i.e. it cantake input arguments to match the input parameter set. Workflow template350 is designed to represent a larger aggregation function that can beinvoked within the context of another workflow template. Each operationor task may in turn refer to another parameterized workflow template.This feature provides support for hierarchical workflow templates thatenable a powerful paradigm for building on previous work. It should alsobe noted, that workflow attribute values need to be consistent.Typically, a validation, check may be performed to ensure suchconsistency.

Workflow template 350 includes a format section 352, a parameter section354, an import section 356, a constant section 358, a variable section360 and a workflow section 362. Workflow template 350 provides a numberof options to support a full software development cycle as well ascustomer development, test and deployment cycle. Arbitrary types ofconstants are not allowed and constants are based upon filters anddescriptors with implementer-designated formats, which are string-based.Actual operational workflows are based upon previously defined resourcetypes and operations. In addition, each workflow represented by aworkflow template such as workflow template 350 goes through a PREPAREand EXECUTE cycle. The PREPARE cycle (see 400, FIG. 14) is used forpreparing a workflow runtime plan. The EXECUTE cycle (see 450, FIG. 15)may be performed iteratively with different control options such ashanding control to an end-user or as a single-shot transaction. Each ofsections 354, 356, 358, 360 and 362 illustrates examples of anappropriate syntax for entries in the corresponding sections 354, 356,358, 360 and 362.

In this example, format section 352 includes attributes that definetransactional semantics 370, isolation semantics 372, error returnsemantics 374, execution semantics 376, scheduling semantics 378 andtype semantics 380. Examples of transactional semantics 370, whichdefine the desired requirements for the corresponding workflow include,but are not limited to, the following:

-   -   NO_ATOMICITY;    -   PARTIAL_COMMIT_WITH_RESUME;    -   FULL_ATOMICITY; and    -   FULL_ATOMICITY_WITH_ROLLBACK.        NO_ATOMICITY, which is typically for development and testing,        implies that atomicity is not required.        PARTIAL_COMMIT_WITH_RESUME, which is typically for development        and testing, implies partial commit is acceptable with the        option to resume the workflow transaction. This option supports        a situation in which a large transaction may encounter an error        mid-way (especially during development and test) and, after        fixing the error, the transaction may conclude. FULL_ATOMICITY        ensures full atomic commit or full abort.        FULL_ATOMICITY_WITH_ROLLBACK implies the corresponding workflow        requires support for rollback after fully committing.

Examples of Isolation semantics 372 include, but are not limited to thefollowing:

-   -   WRITE_CONFLICT;    -   DIRTY_READ_ONLY; and    -   FULL_ISOLATION.        WRITE_CONFLICT implies that a transaction can tolerate write        conflicts. This feature is useful to the test the orchestration        and automation of a corresponding workflow without regard to        consistency. Workflows that perform analytical operations on        historical data may be able to tolerate a DIRTY_READ_ONLY        situation. In a FULL_ISOLATION scenario, reads are performed on        committed writes and write require isolation. In general, a        workflow template supports orchestration software that may not        have implemented consistency and/or transaction semantics.

Examples of Error Return semantics 374 include, but are not limited to,the following:

-   -   COMPLETE_REGARDLESS;    -   ABORT_ON_CRITICAL_ERROR; and    -   ABORT_ON_WARNING.        COMPLETE_REGARDLESS, which is typically employed during        development and testing, is useful to suggest whether to        continue regardless of error or to abort on first critical error        or warning. Continuation without error is useful to test for        code coverage around error paths.

Examples of Execution semantics 376 include, but are not limited to, thefollowing:

-   -   WORKFLOW_PREPARE_ONLY;    -   TRANSACTION_PREPARE_ONLY;    -   FULL_ITERATIVE_FLOW; and    -   FULL_ONE_SHOT.

WORKFLOW_PREPARE_ONLY, which is typically employed during developmentand testing, ensures that the corresponding workflow is prepared but notexecuted. TRANSACTION_PREPARE_ONLY ensures that the correspondingworkflow is executed without commits with transactional preparesemantics (see 370). This scenario is equivalent to running a wholeworkflow as a fully-ordered tree of operations withhierarchical/recursive execution from the top covering the PREPARE phaseonly. Please note that the implementation need not follow recursion andcould use tree data structure assisted depth-first iterative execution.FULL_ITERATVE_FLOW implies that workflow execution returns to anend-user for the end-user to inspect the execution thus far and toresume the workflow transaction. FULL_ONE_SHOT implies that the workflowis to be executed as a one-shot, transaction.

Scheduling semantics 378 takes the form “Scheduling=<format string>” andmay be employed to suggest a time to wait before a correspondingworkflow starts to be executed as a schedulable job, a time to waitbetween any two partial orders before declaring a problem and so on.

Type semantics 380 may take a form as follows:

Type = [ OPERATIONAL; and DECLARITIVE] Filter_Format =<filter_format_as_a_string> and Descriptor_Format =<descriptor_format_as_a_string>.This Description focuses on either an operational or procedural form ofworkflow although the claimed subject matter may also be applicable toDeclarative forms. Type formats apply to workflow parameters (see 354)or constants (see 358) used in the corresponding workflow. There are twotypes of formats, i.e. filters and descriptors. Filters are typicallyused for such examples as Get( ), GetMember( ) and GetSubGround( )whereas descriptors are used for other operations. The above attributesdescribe formats as a string, however the actual format may bedetermined by the implemented for a particular suite of resourceobjects.

The following is an example of the constant section 358, variablesection 360 and workflow section 362, respectively, of a particularworkflow for virtual machine data-disk provisioning, i.e., a“VMDataDiskProvision” template instantiation of workflow template 350:

<Constant_Section> String filter01 = <filter>; String filter02 =<filter>; String filter02 = <filter>; String descriptor01 = <filter>;String descriptor02 = <filter>; String descriptor02 = <filter>;<Constant_Section> <Variable_Section> StorageSystem storageSystem01;KVMHypervisor hypervisor02; StoragePool storagePool03; StorageVolumnvolumn04; KVMVirtualMachine vm05; <Variable_Section> <Workflow_section>storageSystem01 = StorageSystem.Get(<filter01>); hypervisor02 =KVMHypervisor.Get(<filter02>); storagePool03 =storageSystem01.Get(<filter03>); volume04 =Volume.Create(<descriptor01>,storagePool03); vm05 =KVMVirtualMachine.Create(<descriptor02>, hypervisor02); vm05 =volume04.Deploy(<descriptor03>,vm05); <Workflow_Section>.

The following is an example of the parameter section 354, constantsection 358, variable section 360 and workflow section 362,respectively, of a particular workflow for image deployment, i.e., an“ImageDeploy” template instantiation of workflow template 350;

<Parameter_Section> String argument1 = <Image Context>; String argument2= <Pool>; <Parameter_Section> <Constant_Section> String descriptor01 =<descriptor>; String descriptor02 = <descriptor>; String descriptor03 =<descriptor>; <Constant_Section> <Variable_Section> KVMImagemasterImage; KYMImage clonedImage; StorageVolume volume; KVMSystemPoolpool; VirtualMachine vm; <Variable_Section> <Workflow_Section>masterImage = KVMImage.Get(argument01); clonedImage =KVMIMage.Get(descriptor02, masterImage); pool =SystemPool.Get(argument02); vm = ClonedImage.Deploy(descriptor01, pool);vm = vm.Activate(descriptor03); <Workflow_Section>.

The following is an example of the parameter section 354, import section356, variable section 360 and workflow section 362, respectively, of aparticular workflow for provisioning a workload, i.e., an“ProvisionWorkload” template instantiation of workflow template 350:

<Parameter_Section> Descriptor imageDescriptor = <arg1>; DescriptordataDiskDescriptor = <arg2>; <Parameter_Section> <Import_Section>KVMVirtualMachine ImageDeploy (<workflow_template_path>);KVMVirtualMachine VMDataDiskDeploy (<workflow_template_path>);<Import_Section> <Variable_Section> KVMVirtualMachine vm;<Variable_Section> <Workflow_Section> vm =KVMVirtualMachine.ImageDeploy(imageDescriptor); vm =vm.VMDATADiskDeploy(dataDiskDescriptor); <Workflow_Section>.

FIG. 14 is a flow chart of a Prepare Operational Workflow process 400that may employ aspects the claimed subject matter. Process 400illustrates the generation of an operation workflow (see 250; FIGS. 10and 12) using a workflow templates (see 350, FIG. 13). In this example,process 400 is implemented by an administrator on management server 102(FIG. 1) employing a user interface (not shown) of RIOS 116 (FIGS. 1 and2).

Process 400 starts in a “Begin Build Workflow” block 402 and proceedsimmediately to a “Get Next Template” block 404, an operational template,i.e. the “current” template, is retrieved from CRSM 112. During thefirst iteration through process 400, a template corresponding to a rootnode (see 270, FIGS. 10 and 12) is retrieved, i.e. the current template.During processing associated with a “Parse Import” block 408, an importsection (see 356, FIG. 13) associated with the template retrieved duringprocessing associated with block 404 is processed so that duringprocessing associated with a “Build Context” block 408, a workflowcontext object may be built. During processing associated with a “ParseParameter (Par.), Constant (Con.) and Variable (Var.) Sections” block410, the corresponding sections (see 354, 358 and 360, FIG. 13) of thecurrent template are used to populate the context created duringprocessing with block 408

During a “Build Operation (Op.) Node List” block 412, any operationsspecified in a workflow section (see 362, FIG. 13) is processed togenerate a corresponding operation node or “leaf.” These leaves areorganized, into as an operation tree. During processing associated witha “More Templates” 414, a determination is made as to whether or notmore workflow templates (see 266 and 268, FIG. 12) need to be processed,if so, control returns to Get Next Template block 404, the nextreferenced template is retrieved from CRSM 112 and processing continuesas described above. Briefly, the iterations through blocks 404, 406,408, 410 412 and 414 may be characterized as “walking” through the roottemplate to process all the templates referenced in the root templateand subsequent templates.

One a determination has been made during processing associated withblock 414 that all templates have been processed, control proceeds to a“Create Workflow Tree” block 416, during which the work flows andcorresponding operation trees are organized into an ordered workflowtree, which is then stored in CRSM 112 for execution. Finally, controlproceeds to an “End Build Workflow” block 419 during which process 400is complete.

FIG. 15 is a flow chart of an Execute Operation Workflow process 450that may employ aspects the claimed subject matter. In this example,process 450 is stored as logic in CRSM 112 (FIG. 1) as part of RIOS 116(FIGS. 1 and 2). (see 142-149, FIG. 2). Process 450 starts in a “BeginExecute Workflow” block 452 and proceeds immediately to a “RetrieveWorkflow free” block 454. During processing associated with block 454, aworkflow tree, which in the following example will be operationalworkflow 250 (FIGS. 10 and 12), is retrieved form management DB 145. Asexplained above in conjunction with process 400 (FIG. 14), a workflowtree is typically prepared in advance by an administrator and saved in aCRSM for execution one or more times.

During processing associated with a “Get Next Leaf” block 456, a firstleaf from workflow 250 is retrieved. In this example, the leaf retrievedfirst is target end 5.0 252 (FIGS. 10 and 12) and “retrieving a leaf”involves retrieving a corresponding template for the leaf (see 250,FIGS. 10 and 12; 280, FIG. 9). During processing associated with a“Retrieve Leaf Inputs” block 458, input parameters (see 354, FIG. 13)for the leaf retrieved during processing associate with block 456 aremarshaled. During a “Retrieve Next Operation (Op.)” block 460, a firstoperation corresponding to the leaf (see 362. FIG. 13) is retrieved.During processing associated with a “Retrieve Op. Inputs” block 462, theinput parameters for the operation retrieved during block 460 aremarshaled and, during processing associated with an “Execute Op.” block464, the operations is executed. It should be noted that the inputparameters retrieved during block 462 may be defined parameters or theresults of previously executed operations in the workflow tree. Duringprocessing associated with a “Save Results” block 466, the results ofthe operation executed during block 464 are saved to management DB 145so that they are available either as an end result or as inputparameters to subsequent operations.

During processing associated with a “More Ops.?” block 468, adetermination is made as to whether there are more operationscorresponding to the leaf that should be executed. If so, controlreturns to block 460, the template for the next operation is retrievedand processing continues as described above. If not, control proceeds toa “More Leaves? block 470. During processing associated with block 470,a determination is made as to whether there are more leavescorresponding to workflow tree retrieved during processing associatedwith block 454. If so, control returns to block 456, the template forthe next leaf is retrieved and processing continues as described above.

If, during processing associated with block 4711, a determination ismade that there are no more leafs in the workflow tree, control proceedsto a “Marshall Results” block 472 during which the results of alloperations of all processed, leaves are collected and save to CRSM 112.Finally, control proceeds to an “End Execute Workflow” block 479 duringwhich process 450 is complete.

The terminology used, herein is for the purpose of describing particularembodiments only and is not intended, to be limiting of the invention.As used herein, the singular forms “a”, “an” and “the” are intended toinclude the plural forms as well, unless the context clearly indicatesotherwise. It will be further understood that the terms “comprises”and/or “comprising,” when used in this specification, specify thepresence of stated features, integers, steps, operations, elements,and/or components, but do not preclude the presence or addition of oneor more other features, integers, steps, operations, elements,components, and/or groups thereof.

The corresponding structures, materials, acts, and equivalents of allmeans or step plus function, elements in the claims below are intendedto include any structure, material, or act for performing the functionin combination with other claimed elements as specifically claimed. Thedescription of the present invention has been presented for purposes ofillustration and description, but is not intended to be exhaustive orlimited to the invention in the form disclosed. Many modifications andvariations will be apparent to those of ordinary skill in the artwithout departing from the scope and spirit of the invention. Theembodiment, was chosen and described in order to best explain theprinciples of the invention and the practical, application, and toenable others of ordinary skill in the art to understand the inventionfor various embodiments with various modifications as are suited, to theparticular use contemplated.

The flowchart and block diagrams in the Figures illustrate thearchitecture, functionality, and operation of possible implementationsof systems, methods and computer program products according to variousembodiments of the present invention. In this regard, each block in theflowchart or block diagrams may represent a module, segment, or portionof code, which comprises one or more executable instructions forimplementing the specified, logical function(s). It should also be notedthat, in some alternative implementations, the functions noted in theblock may occur out of the order noted in the figures. For example, twoblocks shown in succession may, in fact, be executed substantiallyconcurrently, or the blocks may sometimes be executed in the reverseorder, depending upon the functionality involved. It will, also be notedthat each block of the block diagrams and/or flowchart illustration, andcombinations of blocks in the block diagrams and/or flowchartillustration, can be implemented by special purpose hardware-basedsystems that perform the specified functions or acts, or combinations ofspecial purpose hardware and computer instructions.

We claim:
 1. An apparatus, comprising: a processor; a non-transitorycomputer-readable storage medium coupled to the processor; a pluralityof infrastructure resources; a set of normalized resource statescorresponding to the plurality of infrastructure resources; a set ofnormalized operations corresponding to the plurality of infrastructureresources, wherein each input and output of each normalized operation ofthe set of normalized operations has a corresponding defined type of aplurality of types; and logic, stored on the non-transitorycomputer-readable storage medium and executed on the processor, for:generating a plurality of operational sequences, each operation sequencegenerated by composing a plurality of normalized operations of the setof normalized operations with corresponding resources of the pluralityof infrastructure resources such that the output of each of the set ofnormalized operations becomes the input of another of the set ofnormalized operations, wherein a defined type corresponding to eachparticular input matches a defined type corresponding to thecorresponding output; generating a workflow plan by composing theplurality of operational sequences in conformity with well-definedoperational semantics; and storing, in a non-transitorycomputer-readable storage medium, the workflow plan for execution on aprocessor.
 2. The apparatus of claim 1, wherein the well-definedoperational semantics of the plurality of operational semantics areconstrained based upon semantic objects drawn from best practicepatterns.
 3. The apparatus of claim 1, wherein each resource of thenormalized infrastructure resources is either atomic or composed ofother atomic or non-atomic resources.
 4. The apparatus of claim 1,wherein each resource of the normalized infrastructure resources is anindividual resource or a combination other infrastructure resources. 5.The apparatus of claim 1, further comprising a library of normalizedoperations wherein the set of normalized operations is augmented bynormalized operations from the library of normalized operations.
 6. Theapparatus of claim 1, wherein the defined sets of resource states,operations are stored in corresponding libraries for the generation of asecond workflow plan.
 7. A computer programming product, comprising: anon-transitory computer-readable storage medium; and logic, stored onthe non-transitory computer-readable storage medium for execution on aprocessor, for: defining a set of normalized resource statescorresponding to a plurality of infrastructure resources; defining a setof normalized operations corresponding to the plurality ofinfrastructure resources, wherein each input and output of eachnormalized operation of the set of normalized operations has acorresponding defined type of a plurality of types; generating aplurality of operational sequences, each Operation sequence generated bycomposing a plurality of normalized operations of the set of normalizedoperations with corresponding a corresponding resource of the pluralityof infrastructure resources such that the output of each of the set ofnormalized operations becomes the input of another of the set ofnormalized operations, wherein a defined type corresponding to eachparticular input matches a defined type corresponding to thecorresponding output; generating a work flow plan by composing theplurality of operational sequences in with well-defined operationalsemantics; and storing, in a non-transitory computer-readable storagemedium, the workflow plan for execution on a processor.
 8. The computerprogramming product of claim 7, wherein the well-defined operationalsemantics of the plurality of operational semantics are constrainedbased upon semantic objects drawn from best practice patterns.
 9. Thecomputer programming product of claim 7, wherein each resource of thenormalized infrastructure resources is either atomic or composed ofother atomic or non-atomic resources.
 10. The computer programmingproduct of claim 7, wherein each resource of the normalizedinfrastructure resources is an individual resource or a combinationother infrastructure resources.
 11. The computer programming product ofclaim 7, further comprising a library of normalized operations whereinthe set of normalized operations is augmented by normalized operationsfrom the library of normalized operations.
 12. The computer programmingproduct of claim 7, wherein the defined sets of resource states,operations are stored in corresponding libraries for the generation of asecond workflow plan.